4f6f43cb0fbd01042f0e88e6d2fb8863b7b4ae4bfbe18a8d238223e7c4967bbf

Analysis

max time kernel
3s
max time network
151s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
02/04/2024, 13:13

Target

01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b.apk
Size

2.0MB
MD5

ee8dfc02c1dc19829501c2a72468a442
SHA1

f0e8d39e9dd4c8aec55777d11ff1c98abeafa269
SHA256

01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b
SHA512

74822080cc8156e8ad5b02889fb647fe1373519178a8c551926b8890e525478c5278141c8498f9db0e7c8adca8c7d7f86bbf7c235881f30df6ffd641558de8fe
SSDEEP

49152:AsdkkgeXwYn1lDLXbJpemlMte1je0yfRidlRkYbTAXMWFo:Lkk5XhlDLL3evte1jCkdlRkEG6

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.lyufo.play/files/PersistedInstallation4523406818993981557tmp

Filesize
90B

MD5
e4e6f26cf544357ad0a1bfedd0be4e46

SHA1
c9b92662f8b35091058506d14260e6d36c61d799

SHA256
02ace5a0eee87ba7d4ee33d3638f016aa70443bb062cb07540632a98cdf2c220

SHA512
9b933bcdd0c34510a7e4ea409bc64e2cb3b7c7ce1271fbdec46ac76cf51d5617becffc7f27290b306ade910314b8005a57f6a3e690cdb703b33fd44e42fdf2f0

Download Submit